Analysis

  • max time kernel
    91s
  • max time network
    168s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20250314-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250314-enlocale:en-usos:windows10-ltsc_2021-x64system
  • submitted
    19/03/2025, 17:03 UTC

General

  • Target

    R.E.P.O (v0.1.2)/REPO_Data/Managed/Photon3Unity3D.dll

  • Size

    232KB

  • MD5

    f4ed63ecaa255abfea482446f8d43155

  • SHA1

    c80b0994e2e8a3a8833e6cdceb0055bccd015056

  • SHA256

    d761abef6f533d404303058da32016c78b76459a94e755d974a9739a6c5281bd

  • SHA512

    f7f8c0ba9d8b9047be6dcbbe1201d3e471339bb2d5fdb826c42a401262c54162444de9966eb5709e764019abe98785cf79a5ace13d7a8392f77ddf277292a708

  • SSDEEP

    3072:Nf46H2QQgPLVRyG1r3nD0ucDq9tpWKRUs7x0AQtJ0nfZGOIbmp:N922D3D0uceoKR376S3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\R.E.P.O (v0.1.2)\REPO_Data\Managed\Photon3Unity3D.dll",#1
    1⤵
      PID:5492

    Network

    • flag-us
      DNS
      c.pki.goog
      Remote address:
      8.8.8.8:53
      Request
      c.pki.goog
      IN A
      Response
      c.pki.goog
      IN CNAME
      pki-goog.l.google.com
      pki-goog.l.google.com
      IN A
      142.250.180.3
    • flag-gb
      GET
      http://c.pki.goog/r/r1.crl
      Remote address:
      142.250.180.3:80
      Request
      GET /r/r1.crl HTTP/1.1
      Cache-Control: max-age = 3000
      Connection: Keep-Alive
      Accept: */*
      If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: c.pki.goog
      Response
      HTTP/1.1 304 Not Modified
      Date: Wed, 19 Mar 2025 16:43:42 GMT
      Expires: Wed, 19 Mar 2025 17:33:42 GMT
      Age: 1685
      Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
      Cache-Control: public, max-age=3000
      Vary: Accept-Encoding
    • 142.250.180.3:80
      http://c.pki.goog/r/r1.crl
      http
      614 B
      355 B
      9
      3

      HTTP Request

      GET http://c.pki.goog/r/r1.crl

      HTTP Response

      304
    • 8.8.8.8:53
      c.pki.goog
      dns
      56 B
      107 B
      1
      1

      DNS Request

      c.pki.goog

      DNS Response

      142.250.180.3

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.